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DETAILED ACTION 

1 . Claims 1-33 are pending. None of the claims have been amended. 

Response to Arguments 

Applicant's arguments filed 6/7/2004 have been fully considered but they are not 
persuasive. 

2. With respect to Claim 1, the attorney argues Davis does not disclose a host as recited 
in the presently pending claims. The host disclosed in Claim 1 is defined as "a host in 
communication with said random number generating module." This limitation is 
adequately met by Davis on column 13, lines 5-10. The reader/writer processor is a part 
of the POS terminal, which is the host (see Fig. 2). This host is in communication with a 
random number generating module. 

3. The attorney argues that Davis does not disclose an encryption module in 
communication with at least one memory. Davis on column 13, lines 36-42, "the security 
module encrypts the random number generated in block 324 with the security module 
session key. . Therefore the security module needs to be in communication with a 
memory in order to execute this process. 

4. The attorney argues that Davis does not disclose or suggest a comparing device with 
a function enable output. The confirmation of an established secure session discloses an 
enable output because a confirmation signal is sent to an external device i.e. the 
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reader/writer. This positive confirmation signal acts as the function enable, (see Davis 
on column 14, lines 3-7) 

5. With respect to Claim 75, the attorney argues that the guess passcode is transmitted 
by the manufacturer or other authorized party when the user desires to enable additional 
functions and this is not disclosed by Davis. This definition of a guess password is not 
found anywhere within the claimed limitation and hence cannot be considered. 

6. The attorney argues that Davis does not disclose or suggest "determining a second bit 
string corresponding to the random number." This is adequately met by Davis on 
column 13, lines 36-42, 53-55. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-4, 6, 1 1-13, 15, 16, 18-20, 23, 25-30, 32 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Davis et al (5577121). 

With respect to Claim 1, the limitation of "a random number generating module 
for generating a random number" is met inherently on column 13, lines 5-10; and "a hash 
function module in communication with said random number generating module" is 
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inherently met on column 11, lines 60-62; and "a host in communication with said 
random number generating module" is met inherently on column 13, lines 5-10. This is 
because the security module which generates the random number is contained within the 
host (see Fig. 2). Further limitation of "at least one memory in communication with said 
host" is met on Fig. 2; and "an encryption module in communication with said at least 
one memory" is met on column 2, lines 1-5, column 13, lines 36-42 and on Fig. 2; and "a 
comparing device in communication with said encryption module and said hash function 
module" is met on column 13, lines 36-42 and on column 11, lines 60-63; and "wherein 
said comparing device compares a first bit string to a second bit string to generate a 
function enable output for the component" is met on column 13, lines 66-67 and on 
column 14, lines 1-7. Davis does not explicitly disclose an enable signal. 

The confirmation of an established secure session inherently discloses an enable 
output because a confirmation signal is sent to an external device i.e. the reader/writer. 
This positive confirmation signal acts as the function enable. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have a function enable within the invention so as to generate an 
output signal that is reflective of the outcome of the preceeding operations. 

With respect to Claim 2, the limitation "wherein said hash function module 
further comprises a one-way hash function module configured to receive a pre-image 
input and output a hash value using a one-way hash function algorithm" is met inherently 
on column 1 1, lines 60-62 and on column 14, lines 43-47. 
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With respect to Claim 3, the limitation of "wherein said encryption module 
further comprises a public key encryption module, said public key encryption module 
being configured to receive a public key and a guess passcode from said at least one 
memory as inputs and generate a ciphertext bit string as an output" is met on column 10, 
lines 53-55 and on column 13, lines 55-63. 

With respect to Claim 4, the limitation of "a guess register in communication with 
said host and said encryption module, said guess register being configured to receive a 
guess passcode from said host" is met on column 13, lines 63-65 and on Fig. 2; and "a 
public key module in communication with said encryption module, said public key 
module being configured to store a public key therein" is met inherently on column 10, 
lines 53-55. 

With respect to Claim 6, the limitation of "a selecting device for selecting at least 
one of the function enable output and a bonding option output" is met on column 2, lines 
5-9. 

With respect to Claim 1 1, the limitation of "a ciphertext bit string generated by 
the encryption module" is met on column 13, lines 36-42. 

With respect to Claim 12, the limitation of "said second bit string further 
comprises a hash value generated by said hash function module" is met on column 11, 
lines 60-62. 
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With respect to Claim 13, 23 the limitation of "wherein said comparing device 
further comprises a comparator" is met inherently on column 2, lines 6-9. 

With respect to Claim 15, the limitation of "means for generating a random bit 
string" is met on column 13, lines 5-10; and "a hash function module in communication 
with said means for generating" is met on column 1 1, lines 60-62; and "means for 
acquiring a guess passcode in communication with said means for generating" is met on 
column 14, lines 1-3; and "an encryption module in communication with said means for 
acquiring" is met on column 14, lines 3-7; and "a comparing device in communication 
with said encryption module and said hash function module, said comparing device 
having an output for transmitting a functionality enable signal therefrom" is met on 
column 14, lines 3-7. 

With respect to Claim 16, the limitation of "wherein said means for generating 
further comprises a random number generating module, wherein said module is 
configured to receive an initiate signal and output a random number" is met on column 
13, lines 5-10. 

With respect to Claim 18, the limitation of "wherein said hash function module 
further comprises a one-way hash function module configured to receive a pre-image 
input and output a hash value in accordance with a one-way hash function algorithm" is 
met on column 11, lines 60-62. 
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With respect to claim 19, the limitation of "a host in communication with said 
means for generating" is met on column 1 1, lines 19-24. The POS terminal represents 
the host. Further limitation of u a guess register in communication with said host" is met 
on Fig. 2. The memory of the SVC represents the guess register. The limitation of 
"wherein said host is configured to receive a guess passcode from a manufacturer 
corresponding to the random bit string" is met on column 1 1, lines 6-15. 

With respect to Claim 20, the limitation of "a public key encryption module" is 
met on column 10, lines 53-55; and "a public key module in communication with said 
public key encryption module" is met on column 13, lines 36-42 and "wherein said 
public key encryption module is configured to receive a public key from said public key 
module and a guess passcode from said means for acquiring, and generate a ciphertext bit 
string therefrom" is met on column 13, lines 55-63. 

With respect to Claim 25, the limitation of "generating a random number" is met 
on column 13, lines 6-8; and "calculating a first bit string from the random number" is 
met on column 13, lines 9-10 and 18-25; and "determining a second bit string 
corresponding to the random number" is met on column 13, lines 36-46; and "encrypting 
the second bit string with a public key to generate a third bit string" is met on column 13, 
lines 36-42; and "comparing the third bit string to the first bit string to determine a match; 
outputting a function enable signal in accordance with the comparison" is met on column 
13, lines 53-55. The confirmation signal represents the enable signal. 
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With respect to Claim 26, the limitation of "wherein said step of calculating a first 
bit string further comprises calculating a hash value of said random number" is met on 
column 17, lines 45-52 and column 14, lines 43-47. 

With respect to Claim 27, the limitation of "transmitting the random number to a 
manufacturer" is met on column 13, lines 8-10; and "calculating a guess passcode 
corresponding to the random number" is met on column 13, lines 18-22; and "receiving 
the guess passcode in a host" is met on column 13, lines 23-29. 

With respect to Claim 28, the limitation of "receiving a guess passcode from a 
host" is met on column 13, lines 55-60; and "receiving a public key and encrypting the 
guess passcode and the public key to generate a ciphertext bit string" is met on column 
13, lines 55-63. 

With respect to Claim 29, the limitation of "receiving the third bit string at a first 
input of a comparator; and receiving the first bit string at a second input of the 
comparator; determining if the first bit string matched the second bit string" is met on 
column 13, lines 66-67 and on column 14, lines 1-3; and "outputting a match signal if a 
match is determined" is met on column 14, lines 3-7. 



/ 
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With respect to Claim 30, the limitation of "wherein said outputting step further 
comprises the step of determining a final output enable signal from a bonding option 
output signal and the function enable signal" is met inherently on column 14, lines 3-10. 

With respect to Claim 32, the limitation of "wherein said transmitting step further 
comprises communicating with the manufacturer through at least one of an internet 
connection, a dial up connection, and a voice connection to obtain the guess passcode" is 
met on column 17, lines 18-22. 

Claims 5, 7-10, 17, 21, 22, 31 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Davis et al (5577121) in view of Wang (5500808). 

With respect to Claims 5, 7-10, 17, 21, 22 and 31 all the limitation is expressly 
met by Davis et al except the limitation disclosed by the claims listed. However the 
limitations of the claims listed are silently revealed in Davis et al with respect to the 
teachings of Wang on column 1, lines 55-59. 

It would have been obvious at the time the invention was made to combine the 
teachings of Wang within the system of Davis et al because it is a well known method to 
convert a series of inventive steps into equivalent logic gates that perform the same 
functions as the inventive steps, but in hardware (see Wang, column 1, lines 55-59). It is 
obvious because this is a well known method in the art of implementing inventive steps 
into a working hardware construct by conversion to logic gates that implement the 
inventive steps. It would be impossible to implement the inventive steps in hardware if it 
weren't converted as disclosed in the invention. 
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Claims 14, 24 and 33 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Davis et al (5577121) in view of Conley et al (6651 107 Bl). 

With respect to Claim 14, 24 and 33, all the limitation is met by Davis et al except 
the limitation disclosed below. 

The limitation of "component further comprises at least one of a network switch 
and a media access controller" is met by Conley et al in the abstract. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Conley et al within the system of Davis 
et al because a network switch and a media access controller are necessary for a node to 
gain access to the internet and vice versa. 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1. 136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tracey Akpati whose telephone number is 571-272-3846. 
The examiner can normally be reached on 8.30am-6.00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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